This Privacy Policy describes how MyCareRec (“HealthPocket”, “we”, “our”, or “us”) collects, uses, stores, shares, and protects information when you use the HealthPocket mobile application and related services (the “Service”). HealthPocket is a digital health and prepaid health-card application that lets you manage your health plan, card, payments, and related records.
By downloading, registering for, or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Who we are
HealthPocket is operated by MyCareRec. For privacy questions or requests, contact:
- Email: privacy@healthpocket.ai
- Support: support@healthpocket.ai
- Website: https://healthpocket.ai
2. Information we collect
We collect information that you provide, information generated when you use the Service, and information from our service partners as needed to operate the product.
2.1 Account and identity information
- Mobile phone number (used to sign in via one-time password)
- Name and email address
- Customer and account identifiers associated with your HealthPocket profile
2.2 Health and plan information
- Health-card plan details, coverage period, and related service entitlements
- Health-service usage associated with your plan
- Other health-related information you or your plan administrator make available through the Service
This information is treated as sensitive personal data and is used only to provide the Service.
2.3 Card, banking, and payment information
When you use HealthPocket prepaid card or recharge features, we and our authorized partners process:
- Card identifiers (such as card ID, last four digits, expiry, and display name)
- Account balance, load history, and card status (active, locked, hotlisted, or closed)
- Transaction details, including amount, date, description, merchant category where available, and related references
- Card-control preferences and spending limits you set
- Payment records for card recharge, including order identifiers and payment confirmation from our payment processor
Full card PAN, CVV, and PIN are handled through authorized card-program / PCI-compliant partners and secure widgets. We do not use Face ID or Touch ID data ourselves; biometric authentication, where enabled, stays on your device and is used only to unlock secure card information locally.
2.4 Device, diagnostics, and notifications
- Device and app information needed to operate and secure the Service
- Crash and diagnostic logs through Firebase Crashlytics
- Push-notification tokens through Firebase Cloud Messaging, if you allow notifications
2.5 Information we do not collect
- We do not sell your personal data.
- We do not use your data for third-party advertising.
- We do not collect precise location for advertising or tracking.
- We do not collect Face ID or fingerprint templates; those remain on your device.
3. How we use information
We use the information above to:
- Create and authenticate your account (including OTP login)
- Provide prepaid card, recharge, transaction history, and card-control features
- Show plan details, balances, and related health-card services
- Process payments and prevent fraud, abuse, and unauthorized access
- Send service messages, including OTPs and operational notifications
- Diagnose crashes, improve reliability, and maintain security
- Comply with applicable law, card-network rules, and partner requirements
- Respond to support requests and close or restrict accounts when requested or required
4. App Store privacy categories
For Apple App Store nutrition-label purposes, HealthPocket may collect the following, linked to your identity where needed to provide the Service:
| Category | Examples | Used for |
|---|---|---|
| Contact Info | Phone number, email, name | Account, OTP login, support |
| Health & Fitness | Health-plan and related service information | App functionality |
| Financial Info | Card, balance, transactions, payment status | App functionality, fraud prevention |
| Identifiers | User, customer, and device identifiers; push token | Account, security, notifications |
| Purchases | Card-recharge / payment records | App functionality |
| Diagnostics | Crash logs | App reliability |
We do not use this data for third-party advertising. Analytics, if any, is limited to operating and improving the Service.
5. How we share information
We share information only as needed to operate HealthPocket:
- Card-program / banking partners (including Hyperface and card networks) to issue and manage your prepaid card, process transactions, load balance, apply card controls, and prevent fraud.
- Payment processors (including Razorpay) to create payment orders, complete card recharge, and verify payment authenticity.
- Infrastructure providers (including Google Firebase) for crash reporting and push notifications.
- Regulators, law enforcement, or card networks when required by law, dispute, or suspected fraud.
These partners process data under their own security and contractual obligations. We do not share your information with unrelated third parties for their marketing.
6. Data storage, security, and retention
We store data on systems used to operate HealthPocket and with the partners listed above. Sensitive financial data is handled in line with applicable banking and PCI-DSS requirements of our card and payment partners. Data on the device may be stored using encrypted local storage.
No method of transmission or storage is completely secure. We use commercially reasonable safeguards, but we cannot guarantee absolute security.
We retain information for as long as your account is active and as needed to:
- Provide the Service
- Meet legal, tax, accounting, dispute, and card-network obligations
- Detect and prevent fraud or abuse
When you close your account, we instruct our systems to mark the associated card account as closed and we clear local app data on your device. Some records may be retained where the law or our banking/payment partners require it.
7. Your choices and rights
Depending on applicable law (including India’s Digital Personal Data Protection Act, 2023), you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion or account closure
- Withdraw consent where processing is based on consent
- Lodge a complaint with the relevant data-protection authority
You can close your HealthPocket account from the Profile screen (“Close account”). You can also email privacy@healthpocket.ai. You may disable notifications in your device settings. You may disable Face ID / Touch ID in device settings; this does not send biometric data to us.
8. Children’s privacy
HealthPocket is intended for adults. The Service includes prepaid card and payment features and is not directed to children under 18. We do not knowingly collect personal data from children under 18. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.
9. International processing
HealthPocket is offered for users in India. Some processors (for example, cloud, crash reporting, or payment infrastructure) may process data on servers outside India. Where that happens, we take steps consistent with applicable law to protect the information.
10. Third-party services
The following partners may process data as described above. Their practices are governed by their own policies:
- Razorpay — https://razorpay.com/privacy/
- Google Firebase — https://firebase.google.com/support/privacy
11. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be posted at this URL with a revised “Last updated” date. Material changes may also be notified in the app or by other reasonable means. Continued use of the Service after an update means you accept the revised policy.
12. Contact us
If you have questions, requests, or complaints about this Privacy Policy or our data practices:
- Privacy: privacy@healthpocket.ai
- Support: support@healthpocket.ai